General
- Target 2026-08-31_11c98a823423c3abee3a89ade5c5cb65_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.1MB
- Sample260831-2z1bjsfm3s
- SHA256 decc3aa955b3ac23f9bcfc6c92e23b66eff7e165cdca3a758a0397dc3399c5a7
- MD5 11c98a823423c3abee3a89ade5c5cb65
- SHA1 3c4ee814d4cfed66c10d59b62ab8d1a45511617e
- SHA512 95b961e4a0e598c7d35b27e27ab4e3037ea63abbd7cf23f12cdd113c921fb53d60aeedaa1042eae6a4e6cb5df959c64c45196b984257b659c0ad87902007218c
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUrM5Cnkt:00GnJMOWPClFdx6e0EALKWVTffZiPAcz
- TLSH T1B3A5BF6D725081F9E6ABD038C81A480FE7F534A9536495EB1AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-31_11c98a823423c3abee3a89ade5c5cb65_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_11c98a823423c3abee3a89ade5c5cb65_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.1MB
- SHA256 decc3aa955b3ac23f9bcfc6c92e23b66eff7e165cdca3a758a0397dc3399c5a7
- MD5 11c98a823423c3abee3a89ade5c5cb65
- SHA1 3c4ee814d4cfed66c10d59b62ab8d1a45511617e
- SHA512 95b961e4a0e598c7d35b27e27ab4e3037ea63abbd7cf23f12cdd113c921fb53d60aeedaa1042eae6a4e6cb5df959c64c45196b984257b659c0ad87902007218c
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUrM5Cnkt:00GnJMOWPClFdx6e0EALKWVTffZiPAcz
- TLSH T1B3A5BF6D725081F9E6ABD038C81A480FE7F534A9536495EB1AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory